Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230161	7.5	危険	wf-sections XOOPS	-	Xoops モジュールで使用される WF-Section における SQL インジェクションの脆弱性	-	CVE-2007-1974	2012-12-20 18:19	2007-04-9	Show	GitHub Exploit DB Packet Storm

230162	4.3	警告	sam crew	-	Sam Crew MyBlog の admin/modify.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-1969	2012-12-20 18:19	2007-04-11	Show	GitHub Exploit DB Packet Storm

230163	6.8	警告	sam crew	-	Sam Crew MyBlog の games.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1968	2012-12-20 18:19	2007-04-11	Show	GitHub Exploit DB Packet Storm

230164	7.5	危険	XOOPS	-	XOOPS 用の WF-Snippets モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-1962	2012-12-20 18:19	2007-04-11	Show	GitHub Exploit DB Packet Storm

230165	7.5	危険	phpBB	-	phpBB 用の Mutant ポータルの mutant_functions.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-1961	2012-12-20 18:19	2007-04-11	Show	GitHub Exploit DB Packet Storm

230166	7.5	危険	XOOPS	-	XOOPS 用の Rha7 Downloads モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-1960	2012-12-20 18:19	2007-04-11	Show	GitHub Exploit DB Packet Storm

230167	10	危険	tinymux	-	TinyMUX の command.cpp における脆弱性	-	CVE-2007-1959	2012-12-20 18:19	2007-04-11	Show	GitHub Exploit DB Packet Storm

230168	5	警告	tinymux	-	TinyMUX におけるバッファオーバーフローの脆弱性	-	CVE-2007-1958	2012-12-20 18:19	2007-04-11	Show	GitHub Exploit DB Packet Storm

230169	7.5	危険	UBB Systems	-	Groupee UBB.threads の ubbthreads.php における SQL インジェクションの脆弱性	-	CVE-2007-1956	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

230170	10	危険	signkorea	-	SignKorea SKCrypAX ActiveX コントロールモジュールにおけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2007-1955	2012-12-20 18:19	2007-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213721	5.5	MEDIUM Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-…	NVD-CWE-noinfo	CVE-2020-0821	2024-11-21 13:54	2020-04-16	Show	GitHub Exploit DB Packet Storm

213722	5.5	MEDIUM Local	microsoft	windows_10 windows_server_2016 windows_server_2019	A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.	NVD-CWE-noinfo	CVE-2020-0794	2024-11-21 13:54	2020-04-16	Show	GitHub Exploit DB Packet Storm

213723	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0888.	NVD-CWE-noinfo	CVE-2020-0784	2024-11-21 13:54	2020-04-16	Show	GitHub Exploit DB Packet Storm

213724	8.8	HIGH Network	microsoft	publisher powerpoint word access visio excel outlook office project office_365_proplus	A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CV…	NVD-CWE-noinfo	CVE-2020-0760	2024-11-21 13:54	2020-04-16	Show	GitHub Exploit DB Packet Storm

213725	5.5	MEDIUM Local	microsoft	windows_server_2016 windows_10 windows_server_2019	An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020…	NVD-CWE-noinfo	CVE-2020-0699	2024-11-21 13:54	2020-04-16	Show	GitHub Exploit DB Packet Storm

213726	8.8	HIGH Network	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.	NVD-CWE-noinfo	CVE-2020-0687	2024-11-21 13:54	2020-04-16	Show	GitHub Exploit DB Packet Storm

213727	7.2	HIGH Network	sonatype	nexus	Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.	CWE-20 Improper Input Validation	CVE-2020-10204	2024-11-21 13:54	2020-04-2	Show	GitHub Exploit DB Packet Storm

213728	4.8	MEDIUM Network	sonatype	nexus	Sonatype Nexus Repository before 3.21.2 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-10203	2024-11-21 13:54	2020-04-2	Show	GitHub Exploit DB Packet Storm

213729	8.8	HIGH Network	sonatype	nexus	Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2020-10199	2024-11-21 13:54	2020-04-2	Show	GitHub Exploit DB Packet Storm

213730	6.5	MEDIUM Network	zimbra	zm-mailbox	cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the…	CWE-862 Missing Authorization	CVE-2020-10194	2024-11-21 13:54	2020-03-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed